linux-kernel - Re: [PATCH] cdrom: fix improper type cast, which can leat to information leak.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <649893e3-c610-dd8d-3370-26a3408702f8@kernel.dk>
Date:   Wed, 3 Oct 2018 10:21:06 -0600
From:   Jens Axboe <axboe@...nel.dk>
To:     Yang Xiao <YangX92@...mail.com>
Cc:     "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH] cdrom: fix improper type cast, which can leat to
 information leak.

On 10/3/18 6:54 AM, Yang Xiao wrote:
> From: Young_X <YangX92@...mail.com>
> 
> There is another cast from unsigned long to int which causes
> a bounds check to fail with specially crafted input. The value is
> then used as an index in the slot array in cdrom_slot_status().
> 
> This issue is similar to CVE-2018-16658 and CVE-2018-10940.

Applied, thanks.

-- 
Jens Axboe